A fun thing is that it is possible with the Qubes architecture, since VMs can be saved to a file and resumed at will (although qubes-rpc may not support it properly). Xen also has some other useful features like live transfer.

Note: I have not actually tested any of this due to lack of time, but is seems quite possible, although some software modifications may be needed.

the Allwinner A20, amazingly has Virtualisation: it's a Cortex A7 (the baby brother of the A15). google "Xen allwinner A20" for instructions on how to set it up. i'm looking forward one day to trying out android where it belongs: as a highly restricted and compartmentalised "application" that can be run full-screen on the desktop of a trusted OS.

It had also occurred to me that virtualization might be the best way to get Android running on an ARM-based EOMA68 computer, especially in a desktop or laptop housing. The Shashlik project (http://www.shashlik.io/) might be useful as a starting point for getting there. My one concern is that, in my experience with virtualization on a Windows PC, audio in a VM always has noticeable latency. But maybe it'll be better with Linux as the host OS, especially if the Android guest OS can be modified to cooperate more closely with the virtualization layer. Some equivalent of VirtIO for audio.

I have found my YubiKey quite nice for password sercurity, but I use it in a slightly different way. I use password-store, which is a git repository of GPG encrypted passwords. While I'm on my main laptop, which has Qubes, I can access passwords using a key stored in my keys vault using Qubes split GPG. Encrypted passwords are synced through SSH to my serwer. On my other computers, I can decrypt passwords with my YubiKey as a gpg smart card. This is probably way overcomplicated, but it works.